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DETAILED ACTION 
Response to Amendment 

1 . This action is in response to the amendment filed on October 12, 2006. Claims 
29,31-39, and 41-48 remain pending in the application. 

Response to Arguments 

2. Applicant's arguments filed on October 12, 2006 have been fully considered but 
they are not persuasive for the following reasons: 

Regarding claim 29, the applicant argues that the Cited Prior Art (CPA), Jamroga 
et al. (U.S. Patent 6,574,742), does not teach that the wireless appliances are hand- 
held communications devices: This argument is not found persuasive. The CPA 
teaches that each participant institution and satellite location have "computers, 
computer networks, modalities, terminals, input/output devices, transceivers or the like 
(not shown) for transmitting and receiving digital data and information" (column 7 lines 
51-56) over communication links which can be wireless (column 7 lines 46-50). The 
terminals or the computers can include laptops, which are both hand-held and provide 
wireless communication, as evidenced by the wireless links (column 7 lines 46-50). 

Furthermore, the applicant argues that the CPA does not teach that the VPN 
controls access to the hand-held, wireless personal communication appliances. This 
argument is not found persuasive. The communication between the server (database) 
and the clients (hand-held) can be through a VPN communications link. The VPN by 
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definition (see Wikipeida.org) is a secure, link wherein access to the devices is 
regulated by some sort of authentication mechanism, whether it be a password, smart 
card, etc. Therefore, it was well-known at the time of invention that VPNs, by their 
nature, regulate access to the clients, and since the clients of the CPA use a VPN to 
communicate, the access to them is regulated by the VPN. 

Furthermore, the applicant argues that the CPA does not teach that the VPN 
teaches a tunnel. This argument is not found persuasive. The CPA teaches that the 
clients can communicate securely through the Internet with the server (database) by 
use of a VPN (column 5 lines 55-65). A VPN is a secure mechanism, that if used 
through the Internet, encapsulates the data (creates a tunnel) from the sender to the 
receiver (see Wikipedia: VPN). Therefore, since a VPN is established between the r 
client and the server in the CPA, it is asserted that the CPA teaches a VPN tunnel. 

Therefore, the rejection for the claims are respectfully maintained as given below. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 
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3. Claims 29-34, and 39-48 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Jamroga et al. (U.S. Patent No. 6,574,742). 

Regarding claim 29, Jamroga discloses: 

A wireless database management system, comprising: 

a first server providing a first virtual private network (VPN) and providing Internet 
access to client-held wireless communication appliances, the VPN software limiting 
access to a subset of the wireless communication appliances that subscribe to the VPN 
(column 5 lines 49-62, column 7 lines 35-56), wherein wireless devices communicate 
with a database through the use of a VPN; 

a second server providing a second VPN with access to the Internet and 
providing access to one or more databases associated with the subscribing subset of 
wireless communication devices (column 5 lines 49-62, column 7 lines 35-56), wherein 
the databases are connected to the Internet, and communicate via a VPN to the clients; 

wherein the operation of the first and second VPN creates a VPN tunnel in the 
Internet restricted to data addressed to or from the subscribing subset of wireless 
communication appliances (column 5 lines 49-62, column 7 lines 35-56), wherein a VPN 
is used to connect the clients to the databases; and 

wherein the wireless communication appliances are one of a personal digital 
assistant (PDA), cell phone, two-way pager or other mobile, hand-held communication 
device (column 7 lines 45-55), wherein the communication can be through cellular 
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communications or other wireless communication, or wireless laptops with built in 
wireless LAN cards. 

Claim 31 is rejected as applied above in rejecting claim 29. Furthermore, Jamroga 
discloses: 

The wireless database management system of claim 29 wherein the first virtual 
private network (VPN) operating on the first server providing Internet access to client- 
held wireless communication appliances is a VPN-controlled wireless proxy server 
securing data transferred between the client-held wireless communication appliances 
and the Internet (column 7 line 60 - column 8 line 9), wherein a proxy server is used as 
an intermediary between the participants network and the modalities and the central 
database. 

Claim 32 is rejected as applied above in rejecting claim 29. Furthermore, Jamroga 
discloses: 

The wireless database management system of claim 29, wherein the data 
transfers between the server providing Internet access to client-held wireless 
communication appliances are encrypted with a public key method (column 9 lines 8- 
13), wherein all communications are digitally encrypted. 

Claim 33 is rejected as applied above in rejecting claim 29. Furthermore, Jamroga 
discloses: 
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The wireless database management system of claim 29, wherein the data 
transfers between the server with access to the Internet and providing access to one or 
more databases associated with the subscribing subset of wireless communication 
devices are encrypted with a private key method (column 9 lines 8-13), wherein all 
communications are digitally encrypted. 

Claim 34 is rejected as applied above in rejecting claim 29. Furthermore, Jamroga 
discloses: 

The wireless database management system of claim 29, wherein users of the 
wireless communication appliances are authenticated before allowing access to the 
databases. 

4. Claims 39, 40-44 are method claims analogous to the system claims of claims 
29-34, and therefore, are rejected following the same reasoning. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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5. Claims 35-36 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Jamroga et al. (U.S. Patent No. 6,574,742) in view of Ludovici et al. (U.S. Patent No. 
6,636,898). 

Claim 35 is rejected as applied above in rejecting claim 29. Furthermore, Jamroga 
discloses: 

The wireless database management system of claim 29, wherein software 
implemented on the server with access to the Internet and providing access to one or 
more databases sets an adjustable timeout for connections between the wireless 
communication appliances and the server. Jamroga does not explicitly mention setting 
an adjustable timeout for connections between wireless communications devices and 
the server. Ludovici et al. (U.S. Patent No. 6,636,898) discloses the ability to control 
connections to a VPN manually by setting timeouts on VPN connections. Ludovici 
states that this control over VPN connections by setting timeouts is for "security reasons 
and connection manageability reasons" (column 1 lines 57-65). Furthermore, Ludovici 
states that is management of connections allows control over connections that may 
become compromised (column 1 , lines 55-65), and further states that without control of 
the tunnel endpoints "it is not possible to insure that the system isn't compromised in 
some way, and that the resulting IPSec tunnel or the VPN connection isn't 
compromised" (column 1 lines 66-61). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to use the dynamic timeout 
feature of Ludovici to allow more security to prevent compromising of the VPN tunnel, 
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and if the VPN tunnel is compromised to allow the dynamic timeout of that connection to 
prevent further security compromises. 

Claim 36 is rejected as applied above in rejecting^claim 35. Furthermore, Jamroga 
discloses: 

The wireless database management system of claim 35. Jamroga does not 
explicitly disclose the server identifying a session between the wireless communication 
appliances and the server with a session identification phrase, and storing the session 
identification phrase in memory. Ludovici discloses a connection name (Figure 11, item 
260), which contain a connection definition (Figure 12 item 26). The connection 
definition (session ID) is a database entry which defines all attributes of the connection 
(column 8 lines 7-10). It would have been obvious, in light of the reasoning given above 
for claim 35, to use a connection ID (session ID) so that each VPN connection can be 
omitted and if necessary, initiating a intentional time-out. 

6. Claims 37-38 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Jamroga et al. (U.S. Patent No. 6,574,742) in view of Baker et al. (U.S. Patent No. 
5,696,898). 

Claim 37 is rejected as applied above in rejecting claim 29. Furthermore, Jamroga 
discloses: 
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The wireless database management system of claim 29. Baker discloses using a 
firewall between the Internet and the proxy server which has access to the databases 
(Figure 1 , item 113). Baker uses the firewall so that any outside users without the 
proper credentials who are not in an authorized access group will be denied access. 
Therefore it would have been obvious to use the firewall of Baker in the system of 
Jamroga in order to prevent the unauthorized access of users not in the particular 
access group. 

Claim 38 is rejected as applied above in rejecting claim 37. Furthermore, Jamroga 
discloses: 

The wireless database management system of claim 37, wherein a second firewall is 
implemented between the server and the databases (column 13 lines 1-4), wherein it is 
disclosed "the warehouse server also preferably performs gateway or security functions 
by regulating the types of transactions allowed to be processed" (column 12 line 66 
column 13 line 1) and further "communications transmitted from unknown users are 
blocked by the multiplexer/gateway 36, or software equivalents, thereby preventing 
unauthorized access to the central database 12" (column 13 lines 1-4). 

7. Claims 45-48 are method claims analogous to the system claims 35-38 rejected 
above, and therefore, are rejected following the same reasoning. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-91 99 (IN USA OR CANADA) or 571-272-1 000. 
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